--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389"}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c3438092cf72709d10c567e5babb7939fbc66106220a25c2be8cc9749ca45db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57154144dd5edf37786bcc8db706cfd022fc8870fea3d461ab9a7633807ef3af"}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01260e4a727846f592ea01ba3a8ff6dd98194842a7a1c66cbd86b67074bce72a"}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57154144dd5edf37786bcc8db706cfd022fc8870fea3d461ab9a7633807ef3af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57154144dd5edf37786bcc8db706cfd022fc8870fea3d461ab9a7633807ef3af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c3438092cf72709d10c567e5babb7939fbc66106220a25c2be8cc9749ca45db"}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57154144dd5edf37786bcc8db706cfd022fc8870fea3d461ab9a7633807ef3af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01260e4a727846f592ea01ba3a8ff6dd98194842a7a1c66cbd86b67074bce72a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c3438092cf72709d10c567e5babb7939fbc66106220a25c2be8cc9749ca45db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57154144dd5edf37786bcc8db706cfd022fc8870fea3d461ab9a7633807ef3af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389"}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57154144dd5edf37786bcc8db706cfd022fc8870fea3d461ab9a7633807ef3af"}
{"level":"info","ts":"2026-07-15T17:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389"}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc"}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5"}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6"}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:40:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"info","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46906","PortSpecifier":{"PortValue":46906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46906","PortSpecifier":{"PortValue":46906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137244,"nanos":72247550},"http":{"id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a432210-ac4e-4c66-818a-19f7e9ca9c3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54922","PortSpecifier":{"PortValue":54922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54922","PortSpecifier":{"PortValue":54922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137244,"nanos":133514010},"http":{"id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dda431c8-ea27-48e6-bc44-ed37c7d845cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46922","PortSpecifier":{"PortValue":46922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b630bff-b7bd-48ca-8453-218bcd005212","method":"GET","path":"/maas-api/v1/api-keys/93115401-619f-435f-91d7-e8c2c0cadc6f","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46922","PortSpecifier":{"PortValue":46922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137244,"nanos":196447743},"http":{"id":"1b630bff-b7bd-48ca-8453-218bcd005212","method":"GET","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/93115401-619f-435f-91d7-e8c2c0cadc6f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/93115401-619f-435f-91d7-e8c2c0cadc6f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b630bff-b7bd-48ca-8453-218bcd005212","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54936","PortSpecifier":{"PortValue":54936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","method":"GET","path":"/maas-api/v1/api-keys/9760c8c0-7232-401f-bd88-9f9c040761c5","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54936","PortSpecifier":{"PortValue":54936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137244,"nanos":241734702},"http":{"id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","method":"GET","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9760c8c0-7232-401f-bd88-9f9c040761c5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9760c8c0-7232-401f-bd88-9f9c040761c5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:40:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"910d1c43-b6d7-47c9-ab78-ddb5d0c14272","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58004","PortSpecifier":{"PortValue":58004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58004","PortSpecifier":{"PortValue":58004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137259,"nanos":250508359},"http":{"id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a651bbbe-b591-44f6-9bf1-f37bc6bbc86b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48750","PortSpecifier":{"PortValue":48750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be4d06c2-499a-4550-acaf-34dedeb8af43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48750","PortSpecifier":{"PortValue":48750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137259,"nanos":304933379},"http":{"id":"be4d06c2-499a-4550-acaf-34dedeb8af43","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be4d06c2-499a-4550-acaf-34dedeb8af43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58016","PortSpecifier":{"PortValue":58016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58016","PortSpecifier":{"PortValue":58016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137259,"nanos":346474007},"http":{"id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","method":"GET","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ELGHrQJh68UxXMEX_WFafq0tRKc1qzGJargHgeCSIQ2R9VloE8B9mktdFyBt"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ELGHrQJh68UxXMEX_WFafq0tRKc1qzGJargHgeCSIQ2R9VloE8B9mktdFyBt\"}"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1ba4274a-a451-458b-8412-c96faeff7b27","keyName":"e2e-auth-iso-a-63e1b7","subscription":"e2e-auth-iso-a59f19","tenant":"e2e-shared-a-0bc296","userId":"1ba4274a-a451-458b-8412-c96faeff7b27","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a59f19"}
{"level":"info","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"722cdc14-48f7-4e90-a4b5-ffe042987eef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42750","PortSpecifier":{"PortValue":42750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8500e558-6784-44f8-b5ff-8a596e29d54b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42750","PortSpecifier":{"PortValue":42750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137276,"nanos":533481962},"http":{"id":"8500e558-6784-44f8-b5ff-8a596e29d54b","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8500e558-6784-44f8-b5ff-8a596e29d54b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39698","PortSpecifier":{"PortValue":39698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66768309-b29c-41b5-9bd6-beb0479a5103","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39698","PortSpecifier":{"PortValue":39698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137276,"nanos":575627416},"http":{"id":"66768309-b29c-41b5-9bd6-beb0479a5103","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66768309-b29c-41b5-9bd6-beb0479a5103","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39704","PortSpecifier":{"PortValue":39704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39704","PortSpecifier":{"PortValue":39704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137276,"nanos":616436645},"http":{"id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","method":"GET","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8iRNUqPKgm2gLCuT_nTMPq0In0kLPntiE0ln9UplR7nET6FjjyKOBwFX3mnQ"}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8iRNUqPKgm2gLCuT_nTMPq0In0kLPntiE0ln9UplR7nET6FjjyKOBwFX3mnQ\"}"}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T17:41:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f033c09-b023-44e5-ac5b-8e27b8d75b25","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52c8fa14-8c87-40da-939d-a196475bfd3d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137293,"nanos":792427547},"http":{"id":"52c8fa14-8c87-40da-939d-a196475bfd3d","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52c8fa14-8c87-40da-939d-a196475bfd3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33578","PortSpecifier":{"PortValue":33578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c96d4c9-7820-4333-8fd7-6866a865347a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33578","PortSpecifier":{"PortValue":33578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137293,"nanos":857753003},"http":{"id":"0c96d4c9-7820-4333-8fd7-6866a865347a","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c96d4c9-7820-4333-8fd7-6866a865347a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44886","PortSpecifier":{"PortValue":44886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44886","PortSpecifier":{"PortValue":44886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137293,"nanos":900773486},"http":{"id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96281ab5-040d-4830-869c-d7d4c8afd1f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33582","PortSpecifier":{"PortValue":33582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33582","PortSpecifier":{"PortValue":33582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137293,"nanos":942072690},"http":{"id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90f38ec0-b583-4d3d-9667-e5d19d2bb7ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60312","PortSpecifier":{"PortValue":60312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a54f69d-8275-4ff3-b194-4130cda51b93","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60312","PortSpecifier":{"PortValue":60312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137311,"nanos":85649267},"http":{"id":"6a54f69d-8275-4ff3-b194-4130cda51b93","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a54f69d-8275-4ff3-b194-4130cda51b93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53330","PortSpecifier":{"PortValue":53330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69417316-6959-4d53-a6ae-0cfb8db64e18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53330","PortSpecifier":{"PortValue":53330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137311,"nanos":126536645},"http":{"id":"69417316-6959-4d53-a6ae-0cfb8db64e18","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69417316-6959-4d53-a6ae-0cfb8db64e18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53336","PortSpecifier":{"PortValue":53336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"908de115-d99b-4a1b-85be-81c6200a8f73","method":"GET","path":"/maas-api/v1/api-keys/f6b92a78-2c95-4070-9e6b-833a6fd5da3a","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53336","PortSpecifier":{"PortValue":53336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137311,"nanos":162042271},"http":{"id":"908de115-d99b-4a1b-85be-81c6200a8f73","method":"GET","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f6b92a78-2c95-4070-9e6b-833a6fd5da3a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f6b92a78-2c95-4070-9e6b-833a6fd5da3a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"908de115-d99b-4a1b-85be-81c6200a8f73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60322","PortSpecifier":{"PortValue":60322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","method":"GET","path":"/maas-api/v1/api-keys/f6b92a78-2c95-4070-9e6b-833a6fd5da3a","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60322","PortSpecifier":{"PortValue":60322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137311,"nanos":193156879},"http":{"id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","method":"GET","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f6b92a78-2c95-4070-9e6b-833a6fd5da3a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f6b92a78-2c95-4070-9e6b-833a6fd5da3a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d89935c-d9f2-4e68-86b3-dfee49a3b491","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46834","PortSpecifier":{"PortValue":46834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46834","PortSpecifier":{"PortValue":46834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137328,"nanos":387176862},"http":{"id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07c48a0c-8a7d-441c-864c-d4da53a0c18c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47180","PortSpecifier":{"PortValue":47180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f817c65-d21c-4504-8261-b439cde6a4ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47180","PortSpecifier":{"PortValue":47180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137328,"nanos":427697351},"http":{"id":"5f817c65-d21c-4504-8261-b439cde6a4ca","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/auth-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f817c65-d21c-4504-8261-b439cde6a4ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46848","PortSpecifier":{"PortValue":46848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e464766-6ca8-49f3-8377-8993ba992b63","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46848","PortSpecifier":{"PortValue":46848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137328,"nanos":462965659},"http":{"id":"8e464766-6ca8-49f3-8377-8993ba992b63","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TaGClalrR9Hu5CPn_nXBSahdexxEfD8TeE0wbFYHf96T90Tu3TzsgkB7vsBE"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TaGClalrR9Hu5CPn_nXBSahdexxEfD8TeE0wbFYHf96T90Tu3TzsgkB7vsBE\"}"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80473f96-62ad-4514-89fa-d22cf4dff0e0","keyName":"e2e-auth-iso-a-49d770","subscription":"e2e-auth-iso-c4eb6e","tenant":"e2e-shared-a-0bc296","userId":"80473f96-62ad-4514-89fa-d22cf4dff0e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/auth-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c4eb6e"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e464766-6ca8-49f3-8377-8993ba992b63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a09b51f5248fbda9a19b0590dba212034c52747221a60126fabbf576284e4fb"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9a447c4721b01b3dc5a07aeea7e662be11f6f97d3e48042d97d206912c54389"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57154144dd5edf37786bcc8db706cfd022fc8870fea3d461ab9a7633807ef3af"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b24ae8c3658b073a23fbd4c379bf2eff4a4992458407d9da68a9da4fe948c843"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c3438092cf72709d10c567e5babb7939fbc66106220a25c2be8cc9749ca45db"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d7ae41d3c1dea60e33ed1e331f30b49ff0eba08410486f1a0d4246c17399924"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01260e4a727846f592ea01ba3a8ff6dd98194842a7a1c66cbd86b67074bce72a"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cee0b1abf38afe2fecbd037c48103f725d97863e8750819a9b5a8cc3fd47e05"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/400781f1ea5fac2bfc4541fe96162c1c7d7e23d0e1a17946180426485c7a23ee"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fe0c85d50af1c58c63f1a2891352498c40f70f259665f6ca229ab4539b7f6fb"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2872e2fd9fb2512ae95ece9e339a95203f72e001c1edbc04aa21c9a4a316086"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36f3c278fafa6eb3107dcf326cec861c36d17bee5cd62620a266b7cc19ef5e5"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b19178bfb2480ba76a34d611ca0d6153e2653e3b73024158934807655ebfdbc"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/069971e3cfe569b253a91513a7acbb2965635fecbbcc76d3db78a4001a6146fc"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b857c23507803c6c40c0452285e4a28386dc7a2d75d1b7dcdc9578a3dfb1c3af"}
{"level":"info","ts":"2026-07-15T17:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c601639d68cacbfeba19d5df4fe59615c0b0237c079c482874a4685dff181c6"}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666"}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666"}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666"}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77"}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666"}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d"}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d"}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"debug","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be"}
{"level":"info","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"}
{"level":"error","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:42:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:42:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617"}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"}
{"level":"debug","ts":"2026-07-15T17:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"}
{"level":"error","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"}
{"level":"debug","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"}
{"level":"info","ts":"2026-07-15T17:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1"}
{"level":"info","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"766138c8-945c-4634-8f58-daa9666a433c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46008","PortSpecifier":{"PortValue":46008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"766138c8-945c-4634-8f58-daa9666a433c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"766138c8-945c-4634-8f58-daa9666a433c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46008","PortSpecifier":{"PortValue":46008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137389,"nanos":142371040},"http":{"id":"766138c8-945c-4634-8f58-daa9666a433c","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"766138c8-945c-4634-8f58-daa9666a433c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"766138c8-945c-4634-8f58-daa9666a433c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"766138c8-945c-4634-8f58-daa9666a433c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"766138c8-945c-4634-8f58-daa9666a433c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"766138c8-945c-4634-8f58-daa9666a433c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"766138c8-945c-4634-8f58-daa9666a433c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/sub-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"766138c8-945c-4634-8f58-daa9666a433c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"766138c8-945c-4634-8f58-daa9666a433c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"766138c8-945c-4634-8f58-daa9666a433c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"766138c8-945c-4634-8f58-daa9666a433c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"766138c8-945c-4634-8f58-daa9666a433c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35632","PortSpecifier":{"PortValue":35632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bf6a95d-6f05-491c-894c-4fb053d79297","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35632","PortSpecifier":{"PortValue":35632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137389,"nanos":184479562},"http":{"id":"4bf6a95d-6f05-491c-894c-4fb053d79297","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/sub-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bf6a95d-6f05-491c-894c-4fb053d79297","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46016","PortSpecifier":{"PortValue":46016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46016","PortSpecifier":{"PortValue":46016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137389,"nanos":221207871},"http":{"id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","method":"GET","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1I2zP3uNJVYGKV1IL_WhbqwK8LsPMrkeXxd8wbZecL9uR5B7Qm7C27Z7CVrQs"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1I2zP3uNJVYGKV1IL_WhbqwK8LsPMrkeXxd8wbZecL9uR5B7Qm7C27Z7CVrQs\"}"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2fc2b400-e818-4083-a21a-e998fb9599bc","keyName":"e2e-sub-iso-61a13c","subscription":"e2e-a-only-6581ea","tenant":"e2e-shared-a-0bc296","userId":"2fc2b400-e818-4083-a21a-e998fb9599bc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/sub-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6581ea"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d740f3b1-0b74-40f2-8c3a-6212815cf4ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08078603-8174-46e4-8345-592b625ec389","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35648","PortSpecifier":{"PortValue":35648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08078603-8174-46e4-8345-592b625ec389","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08078603-8174-46e4-8345-592b625ec389","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35648","PortSpecifier":{"PortValue":35648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137389,"nanos":264623970},"http":{"id":"08078603-8174-46e4-8345-592b625ec389","method":"GET","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MMisuBz8VxM5dPU2_pD9LKMAvo1OHecUYY4PUStMKq1hrtOUmFe8TmKwqQLr"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08078603-8174-46e4-8345-592b625ec389","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MMisuBz8VxM5dPU2_pD9LKMAvo1OHecUYY4PUStMKq1hrtOUmFe8TmKwqQLr\"}"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ffd96f87-34dd-4d02-b393-c12bb0818886","keyName":"e2e-sub-iso-7ac039","subscription":"e2e-b-only-6581ea","tenant":"e2e-shared-b-fadd3e","userId":"ffd96f87-34dd-4d02-b393-c12bb0818886","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08078603-8174-46e4-8345-592b625ec389","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/sub-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08078603-8174-46e4-8345-592b625ec389","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6581ea"}
{"level":"info","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08078603-8174-46e4-8345-592b625ec389","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08078603-8174-46e4-8345-592b625ec389","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46732","PortSpecifier":{"PortValue":46732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46732","PortSpecifier":{"PortValue":46732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137407,"nanos":900877272},"http":{"id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/sub-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7f94a7a-6dc4-46e0-81e9-7486c93d9d8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43090","PortSpecifier":{"PortValue":43090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43090","PortSpecifier":{"PortValue":43090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137407,"nanos":941359164},"http":{"id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/sub-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9136ac0d-df1c-4dd1-9def-b040597e6c62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46742","PortSpecifier":{"PortValue":46742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46742","PortSpecifier":{"PortValue":46742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137407,"nanos":984342445},"http":{"id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1071m5zxAoEuGFOvg_54zoSz7QyVqqiE4XAVciFXaIrgjJ59SmftUxfKOGQbF"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1071m5zxAoEuGFOvg_54zoSz7QyVqqiE4XAVciFXaIrgjJ59SmftUxfKOGQbF\"}"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8e260ec2-377e-4655-81a5-166e6c1819e1","keyName":"e2e-sub-iso-c50c54","subscription":"e2e-shared-sub-76e5c2","tenant":"e2e-shared-a-0bc296","userId":"8e260ec2-377e-4655-81a5-166e6c1819e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/sub-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-76e5c2"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d28ad254-b164-4667-9173-f67f8e7e7cf5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43102","PortSpecifier":{"PortValue":43102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43102","PortSpecifier":{"PortValue":43102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137408,"nanos":14836618},"http":{"id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HjSfr5nmyW9WtIiN_FMtxOSXD6WfRqV5RSofhm80cundB1ETSmmHUmFBMtpn"}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HjSfr5nmyW9WtIiN_FMtxOSXD6WfRqV5RSofhm80cundB1ETSmmHUmFBMtpn\"}"}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ae93e3a-3c4b-4f17-8364-c165e627fe84","keyName":"e2e-sub-iso-dc7492","subscription":"e2e-shared-sub-76e5c2","tenant":"e2e-shared-b-fadd3e","userId":"3ae93e3a-3c4b-4f17-8364-c165e627fe84","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/sub-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-76e5c2"}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99453cb3-121c-4bd6-b1f3-5396e5c18385","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a737b7c31d19ef61a10c743bae701bf1c274900219ec70221e6cdc57ed950c77"}
{"level":"info","ts":"2026-07-15T17:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceb7e88ad8fb95195dcbb48e6ede38b3e526b52a412ba62b3fe72363864de617"}
{"level":"info","ts":"2026-07-15T17:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22e3bcad7f1dec9aa7b7581c4070cdc41726b4d54570145aeaec5ea722334d61"}
{"level":"info","ts":"2026-07-15T17:43:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f5ff581cc00711db4f6009cdf343aab8a5b6acd4663748f97466ccf3ba9f456"}
{"level":"info","ts":"2026-07-15T17:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d5416acb3b3f106cc5dee7d15871394ee7ef18f5deab9e6f7c9668d781a3c82"}
{"level":"info","ts":"2026-07-15T17:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/709b66211307b30786db0373134996c36229b5df60fb8a1caa76d1679cea4666"}
{"level":"info","ts":"2026-07-15T17:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb38459116a04e52932e67fe3b24db9f177f812fe1c71dff16a9ec543a358bde"}
{"level":"info","ts":"2026-07-15T17:43:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69227c0bec20810d1305c1ffab6779d6e529415305388191c5beab171d4e53d"}
{"level":"info","ts":"2026-07-15T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4b5292f153bf1dfd13ef73295edbad179be0dd796988469d9996bc227149d2e"}
{"level":"info","ts":"2026-07-15T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b6dcfc006607e66800bcd44583a48b11985fc4a3785646491e49edf5eedc25a"}
{"level":"info","ts":"2026-07-15T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a29e8b89df34f20d0291420e31161d26580c19375fc0382a85492a097a8000be"}
{"level":"info","ts":"2026-07-15T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb31d0c3f128f3cfbf821269e2f05e5ea763e7edf3b0b8b3ad3a9bbda849df7"}
{"level":"info","ts":"2026-07-15T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6f4a7ac8aaa8b4d2cdf8dd6a6a5d3367ad3063083ec893c3975fbd597b4cd8f"}
{"level":"info","ts":"2026-07-15T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ea7b7e867fba344af09ea3f141fe82a6ee4593537df8818e9467a3eca8e2ca"}
{"level":"info","ts":"2026-07-15T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d91cca839a823900b9736714cebc54dede68974197b852438c4af6f918f63022"}
{"level":"info","ts":"2026-07-15T17:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd768322d8191e5492445d1194afc28df55fd234ba9586df7ab2d1348eb3c9a2"}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719"}
{"level":"error","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232"}
{"level":"error","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"}
{"level":"error","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"error","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d"}
{"level":"info","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"error","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"debug","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:44:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:44:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:44:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:44:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1"}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719"}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"debug","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232"}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a"}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3"}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"}
{"level":"info","ts":"2026-07-15T17:44:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d"}
{"level":"info","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44086a78-807e-42ca-ad75-dfd21320d653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37552","PortSpecifier":{"PortValue":37552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44086a78-807e-42ca-ad75-dfd21320d653","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44086a78-807e-42ca-ad75-dfd21320d653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37552","PortSpecifier":{"PortValue":37552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137491,"nanos":902792294},"http":{"id":"44086a78-807e-42ca-ad75-dfd21320d653","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44086a78-807e-42ca-ad75-dfd21320d653","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44086a78-807e-42ca-ad75-dfd21320d653","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44086a78-807e-42ca-ad75-dfd21320d653","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44086a78-807e-42ca-ad75-dfd21320d653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44086a78-807e-42ca-ad75-dfd21320d653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44086a78-807e-42ca-ad75-dfd21320d653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44086a78-807e-42ca-ad75-dfd21320d653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44086a78-807e-42ca-ad75-dfd21320d653","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44086a78-807e-42ca-ad75-dfd21320d653","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44086a78-807e-42ca-ad75-dfd21320d653","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44086a78-807e-42ca-ad75-dfd21320d653","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44676","PortSpecifier":{"PortValue":44676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44676","PortSpecifier":{"PortValue":44676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137491,"nanos":945771767},"http":{"id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/rate-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faa2dce5-2868-4358-8d79-cbb6988d38b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37558","PortSpecifier":{"PortValue":37558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97da8259-f35b-4e50-bb26-ea028133ef91","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37558","PortSpecifier":{"PortValue":37558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137491,"nanos":983821590},"http":{"id":"97da8259-f35b-4e50-bb26-ea028133ef91","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PDwrPlJ7iHI3hke5_gTw7WZ1Z1AQUqUFMl6OlWzMla9aABcrYMaqIgmuiDpk"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PDwrPlJ7iHI3hke5_gTw7WZ1Z1AQUqUFMl6OlWzMla9aABcrYMaqIgmuiDpk\"}"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","keyName":"e2e-rate-a-b97ba8","subscription":"e2e-rate-iso-a-b97ba8","tenant":"e2e-shared-a-0bc296","userId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-b97ba8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b97ba8","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b97ba8"}
{"level":"debug","ts":"2026-07-15T17:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","keyName":"e2e-rate-a-b97ba8","selected_subscription":"e2e-rate-iso-a-b97ba8","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-b97ba8@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b97ba8","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97da8259-f35b-4e50-bb26-ea028133ef91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46654","PortSpecifier":{"PortValue":46654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46654","PortSpecifier":{"PortValue":46654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137493,"nanos":53826881},"http":{"id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PDwrPlJ7iHI3hke5_gTw7WZ1Z1AQUqUFMl6OlWzMla9aABcrYMaqIgmuiDpk"}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PDwrPlJ7iHI3hke5_gTw7WZ1Z1AQUqUFMl6OlWzMla9aABcrYMaqIgmuiDpk\"}"}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","keyName":"e2e-rate-a-b97ba8","subscription":"e2e-rate-iso-a-b97ba8","tenant":"e2e-shared-a-0bc296","userId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-b97ba8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b97ba8","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b97ba8"}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","keyName":"e2e-rate-a-b97ba8","selected_subscription":"e2e-rate-iso-a-b97ba8","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-b97ba8@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b97ba8","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:44:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8d37265-c8d7-4d52-9a9b-907e298d3d71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46670","PortSpecifier":{"PortValue":46670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46670","PortSpecifier":{"PortValue":46670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137494,"nanos":122481005},"http":{"id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PDwrPlJ7iHI3hke5_gTw7WZ1Z1AQUqUFMl6OlWzMla9aABcrYMaqIgmuiDpk"}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PDwrPlJ7iHI3hke5_gTw7WZ1Z1AQUqUFMl6OlWzMla9aABcrYMaqIgmuiDpk\"}"}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","keyName":"e2e-rate-a-b97ba8","subscription":"e2e-rate-iso-a-b97ba8","tenant":"e2e-shared-a-0bc296","userId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-b97ba8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b97ba8","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b97ba8"}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8dcf80d-876e-4c0f-8428-b2eb5030c261","keyName":"e2e-rate-a-b97ba8","selected_subscription":"e2e-rate-iso-a-b97ba8","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-b97ba8@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b97ba8","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:44:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ed17ab5-068f-4fcc-957a-b01d37b11f22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34314","PortSpecifier":{"PortValue":34314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34314","PortSpecifier":{"PortValue":34314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137502,"nanos":805929257},"http":{"id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8c07321-5a44-40b9-b502-fe9c49b48d49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60518","PortSpecifier":{"PortValue":60518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60518","PortSpecifier":{"PortValue":60518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137502,"nanos":848950175},"http":{"id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"]}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/241c2668557b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=df463ad5-c38a-4b5e-b6de-f2403847e44e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"14f192c7-98c1-4762-b792-4c1a6c91ce60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/rate-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6770d846-e6b3-4dd0-9efe-b4cfdce3af22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34328","PortSpecifier":{"PortValue":34328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34328","PortSpecifier":{"PortValue":34328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137502,"nanos":887368663},"http":{"id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e523e80e-cdd6-49d8-82f0-6c09e1294c5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34336","PortSpecifier":{"PortValue":34336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34336","PortSpecifier":{"PortValue":34336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137503,"nanos":931699155},"http":{"id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3aaf031c-e26a-4e50-88b7-8b8d385e4bb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34346","PortSpecifier":{"PortValue":34346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c37330e-78d2-4d55-8df1-6b67625e955d","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34346","PortSpecifier":{"PortValue":34346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137504,"nanos":968420961},"http":{"id":"5c37330e-78d2-4d55-8df1-6b67625e955d","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c37330e-78d2-4d55-8df1-6b67625e955d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13249331-9023-445a-bede-b95bc939de68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34356","PortSpecifier":{"PortValue":34356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13249331-9023-445a-bede-b95bc939de68","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13249331-9023-445a-bede-b95bc939de68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34356","PortSpecifier":{"PortValue":34356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137506,"nanos":7638041},"http":{"id":"13249331-9023-445a-bede-b95bc939de68","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13249331-9023-445a-bede-b95bc939de68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13249331-9023-445a-bede-b95bc939de68","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13249331-9023-445a-bede-b95bc939de68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13249331-9023-445a-bede-b95bc939de68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13249331-9023-445a-bede-b95bc939de68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13249331-9023-445a-bede-b95bc939de68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34364","PortSpecifier":{"PortValue":34364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34364","PortSpecifier":{"PortValue":34364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137507,"nanos":45976980},"http":{"id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57ed1e68-e4ce-417e-8707-9c0a533a5849","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34380","PortSpecifier":{"PortValue":34380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6086bfb-9863-48a1-baa6-5712438f69fd","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34380","PortSpecifier":{"PortValue":34380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137508,"nanos":85434748},"http":{"id":"b6086bfb-9863-48a1-baa6-5712438f69fd","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6086bfb-9863-48a1-baa6-5712438f69fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34396","PortSpecifier":{"PortValue":34396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34396","PortSpecifier":{"PortValue":34396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137509,"nanos":120477175},"http":{"id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"145ecad6-ad5a-4c3c-9b60-3db43c95409d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d57fd2a-3995-45d6-9239-686786117f82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34398","PortSpecifier":{"PortValue":34398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d57fd2a-3995-45d6-9239-686786117f82","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d57fd2a-3995-45d6-9239-686786117f82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34398","PortSpecifier":{"PortValue":34398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137510,"nanos":156735835},"http":{"id":"8d57fd2a-3995-45d6-9239-686786117f82","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d57fd2a-3995-45d6-9239-686786117f82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d57fd2a-3995-45d6-9239-686786117f82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d57fd2a-3995-45d6-9239-686786117f82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d57fd2a-3995-45d6-9239-686786117f82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34412","PortSpecifier":{"PortValue":34412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34412","PortSpecifier":{"PortValue":34412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137511,"nanos":192742245},"http":{"id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43e00b64-ee6e-4ec8-80c4-131a422c929f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34414","PortSpecifier":{"PortValue":34414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34414","PortSpecifier":{"PortValue":34414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137512,"nanos":238757655},"http":{"id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b61b90a-fe91-4aa7-930e-a1c9fd0fd734","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56124","PortSpecifier":{"PortValue":56124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","method":"POST","path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions","host":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56124","PortSpecifier":{"PortValue":56124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137513,"nanos":277825980},"http":{"id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","method":"POST","headers":{":authority":"e2e-shared-a-0bc296.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vTrLQTq30WcZJqaX_vzBRr7QWWEdlcui6rRN5y6jftYkboTLQy4hLz452DQS\"}"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","subscription":"e2e-rate-iso-a-31bbdc","tenant":"e2e-shared-a-0bc296","userId":"732df647-fd58-4a33-b594-e1c3816c3c6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\",\"requestedSubscription\":\"e2e-rate-iso-a-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0bc296.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0bc296/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732df647-fd58-4a33-b594-e1c3816c3c6f","keyName":"e2e-rate-a-31bbdc","selected_subscription":"e2e-rate-iso-a-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-a-0bc296/e2e-rate-iso-a-31bbdc@ai-tenant-e2e-shared-a-0bc296/rate-test-model-0bc296","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0bc296","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31bbdc","namespace":"ai-tenant-e2e-shared-a-0bc296","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf64c67b-2de6-4215-89fd-e9e22eda6ea2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46256","PortSpecifier":{"PortValue":46256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","method":"POST","path":"/ai-tenant-e2e-shared-b-fadd3e/rate-test-model-fadd3e/v1/completions","host":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46256","PortSpecifier":{"PortValue":46256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784137513,"nanos":311697609},"http":{"id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","method":"POST","headers":{":authority":"e2e-shared-b-fadd3e.apps.acefb9d4-0947-4752-b221-241c2668557b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fadd3e/rate-test-model-fadd3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1F6lleVzRWdua33Zj_KZJhsPEral7VGM9EKmg1Kdem7hn5QuhKCYOK3BjgUPa"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1F6lleVzRWdua33Zj_KZJhsPEral7VGM9EKmg1Kdem7hn5QuhKCYOK3BjgUPa\"}"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ac93ec9-806d-46cd-a7c2-e4757065b089","keyName":"e2e-rate-b-31bbdc","subscription":"e2e-rate-iso-b-31bbdc","tenant":"e2e-shared-b-fadd3e","userId":"6ac93ec9-806d-46cd-a7c2-e4757065b089","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fadd3e/rate-test-model-fadd3e\",\"requestedSubscription\":\"e2e-rate-iso-b-31bbdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fadd3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fadd3e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-31bbdc","namespace":"ai-tenant-e2e-shared-b-fadd3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fadd3e/rate-test-model-fadd3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fadd3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-31bbdc"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ac93ec9-806d-46cd-a7c2-e4757065b089","keyName":"e2e-rate-b-31bbdc","selected_subscription":"e2e-rate-iso-b-31bbdc","selected_subscription_key":"ai-tenant-e2e-shared-b-fadd3e/e2e-rate-iso-b-31bbdc@ai-tenant-e2e-shared-b-fadd3e/rate-test-model-fadd3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fadd3e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-31bbdc","namespace":"ai-tenant-e2e-shared-b-fadd3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T17:45:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eec241e-e2ad-4790-9c6e-623e4b9b1b21","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ec0177f2ad3d9e4293247b68b079cc77c27dbd6b397dff28f03a9baf5872328"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/234e0af62b35e6ad6f2d4f89fb99702d276b9a02114709020d62cca96e0f6719"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13bbbb2a24ab6ae6f21ccc99957d9bc51a112068950ba178e6435484af8003d4"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3506934fb0f6e44f321a9caf01dc528d24ca38537d04b8e1db93dd2ab65ef45"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ee3fcccadb792f65bba873380f66c09780c003aa76ab958cd3ac0c687046232"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28e01547c31d0333356f48aca8545b9dc8c3ee8ca4ae9835b5a11b07384b376c"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebd2911bacecd6dff6694dcd08d3192d200928a8131bbd7c106d49e2e24b3e5a"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c313046d2ad998fdabe7391a3e123850a816a7f99830a65545052f0a399caef3"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786f3ef232f1adb7bfa0a274bf5e7b6dc8010d39ee98102326778e893174828e"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e01b0fb5abfc210cfa20466bc8712d3b2695b6fdbc93421e960966a0949993d"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0830413492afedfbf079d02b4b85dc234178c9ae5e7ef4104f63173654a0a68d"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/353b3ba23bf783dc0becca495f6f06028c8521316110a995cef594369eb6bcbc"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4e67d07258313660f9f53cac98407a75c2b4e363881fc74e521e31086b412ac"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbfb490b05e6628c58f6b9dc5688e11c56ed50e9eb32c292b8d72de6f94f86a1"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7940fb814b187e7286a7ec98d4e07e4b8dac1207d3c56687d9e8e75365fdf609"}
{"level":"info","ts":"2026-07-15T17:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cfe395cbeb9d99a7ca0f442a781ed02d972a5ab2cff0e50364adda16ac8a75d"}
{"level":"info","ts":"2026-07-15T17:45:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26ed1a1b5ee24d71c91cc36fb43578606e34bdbfab486cceafe13dc0a1c01eb1"}
{"level":"info","ts":"2026-07-15T17:45:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42cbdc85d74bb52e0b996f8227666e9339084b89a1ab916cc3befd2a141b0c95"}
{"level":"info","ts":"2026-07-15T17:45:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73ea383bf06586677fdf18c581057d3291e10a895c71587bb407c3c5737f55f5"}
{"level":"info","ts":"2026-07-15T17:45:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eca91ed7ab7a380ee5272e9a0b8a75bf3365598829168795840ef9756536e91"}
{"level":"info","ts":"2026-07-15T17:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af1647267be9a7b960ab429e8ade661c8d046ac4eeb43662074e345df2777607"}
{"level":"info","ts":"2026-07-15T17:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8f9b64ed3088b0c0b27465c18b489955a06fbf37cb515f4b8bd372ed3a61f6d"}
{"level":"info","ts":"2026-07-15T17:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/025e035df8f85b3163dc47a028e452a0defc55d889e5dbc0ee54cf1a41ae3fc1"}
{"level":"info","ts":"2026-07-15T17:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85bd75c50afb8625792c44a5105efc19a9922bb41d8454ab4116eb6938d91ce2"}